While connecting to SQL Server through jdbc - Kerberos error - Server not found in Kerberos database (7) - LOOKING_UP_SERVER

Question

I'm trying to test a connection from AWS EMR (spark-shell) to external SQL Server instance using jdbc. And also I'm using Windows AD credentials.

For EMR Kerberos config, followed all the instructions given here: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-kerberos-cluster-kdc.html

Question

• Here cluster dedicated KDC will work or do we need cross realm to connect to external SQL Server instance from AWS EMR

Connection URL looks like:

"jdbc:sqlserver://serverName:port;databaseName;integratedSecurity=true;MultiSubnetFailover=True;authenticationScheme=JavaKerberos;user=xxx;password=xxx"

Error:

Caused by: GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - LOOKING_UP_SERVER)

at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:772)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
at com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:163)
... 22 more
Caused by: KrbException: Server not found in Kerberos database (7) - LOOKING_UP_SERVER
at sun.security.krb5.KrbTgsRep.(KrbTgsRep.java:73)
at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:226)
at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:237)
at sun.security.krb5.internal.CredentialsUtil.serviceCredsSingle(CredentialsUtil.java:477)
at sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:340)
at sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:314)
at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:169)
at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:490) at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:695) ... 25 more
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.KDCRep.init(KDCRep.java:140)
at sun.security.krb5.internal.TGSRep.init(TGSRep.java:65)